You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@teaclave.apache.org by Blaine Malone <no...@github.com.INVALID> on 2021/03/05 22:28:48 UTC

[apache/incubator-teaclave-sgx-sdk] DCAP Error (#321)

Any ideas why the DCAP sample isn't working out of the box? 

I'm using with the recommended docker image. Maybe this doesn't have all the binaries needed to run this same? 

```
root@7006db9d90eb:~/sgx/samplecode/dcap-pckretrieval# make
    Finished release [optimized] target(s) in 0.00s
Cargo  =>  bin/libdcap_quoteprov.so.1
   Compiling PCKIDRetrievalTool v1.0.0 (/root/sgx/samplecode/dcap-pckretrieval/app)
error[E0133]: call to unsafe function is unsafe and requires unsafe function or block
   --> src/main.rs:158:14
    |
158 |     let _l = libloading::Library::new("./libdcap_quoteprov.so.1").unwrap();
    |              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ call to unsafe function
    |
    = note: consult the function's documentation for information on how to avoid undefined behavior

error: aborting due to previous error

For more information about this error, try `rustc --explain E0133`.
error: could not compile `PCKIDRetrievalTool`
```

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/apache/incubator-teaclave-sgx-sdk/issues/321

Re: [apache/incubator-teaclave-sgx-sdk] DCAP Error (#321)

Posted by Yu Ding <no...@github.com.INVALID>.

fix is involved in PR #322 :-) will be merged shortly

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/apache/incubator-teaclave-sgx-sdk/issues/321#issuecomment-792461008

Re: [apache/incubator-teaclave-sgx-sdk] DCAP Error (#321)

Posted by Blaine Malone <no...@github.com.INVALID>.

@dingelish Slightly confused, do I need to install the binaries listed here https://github.com/intel/SGXDataCenterAttestationPrimitives in order to get Quote attestation working? 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/apache/incubator-teaclave-sgx-sdk/issues/321#issuecomment-792861138

Re: [apache/incubator-teaclave-sgx-sdk] DCAP Error (#321)

Posted by Blaine Malone <no...@github.com.INVALID>.

@dingelish I'm running https://ark.intel.com/content/www/us/en/ark/products/97472/intel-core-i5-7300u-processor-3m-cache-up-to-3-50-ghz.html. 

Is it confirmed that this processor is not supported? 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/apache/incubator-teaclave-sgx-sdk/issues/321#issuecomment-794391826

Re: [apache/incubator-teaclave-sgx-sdk] DCAP Error (#321)

Posted by Yu Ding <no...@github.com.INVALID>.

please refer to the readme for setup :-)
https://github.com/apache/incubator-teaclave-sgx-sdk/blob/master/samplecode/dcap-pckretrieval/Readme.md

for the apt commands, since intel just released 2.13, i recommend force the version number by
```
sudo apt install libsgx-dcap-ql=1.9.100.3-bionic1 libsgx-ae-qve=1.9.100.3-bionic1 libsgx-dcap-quote-verify=1.9.100.3-bionic1
```
`1.9.100.3` is the one currently supported by this sdk (v1.1.3)

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/apache/incubator-teaclave-sgx-sdk/issues/321#issuecomment-792971470

Re: [apache/incubator-teaclave-sgx-sdk] DCAP Error (#321)

Posted by Blaine Malone <no...@github.com.INVALID>.

@dingelish Would the vanilla EPID remote attestation work with this processor? 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/apache/incubator-teaclave-sgx-sdk/issues/321#issuecomment-796901678

Re: [apache/incubator-teaclave-sgx-sdk] DCAP Error (#321)

Posted by Yu Ding <no...@github.com.INVALID>.

I think i5-7300u does not support DCAP, which requires Flexible Launch Control (a hardware feature).

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/apache/incubator-teaclave-sgx-sdk/issues/321#issuecomment-794460899